$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69B693A0D08B11EEB1833D56C4F9AE02.roa File: 69B693A0D08B11EEB1833D56C4F9AE02.roa (raw, json) Hash identifier: ozxThdrisJTC0gpBhJUtH8sPorPVrHnFoWahtIkPyao= Subject key identifier: B3:A9:69:D0:9D:05:7F:82:6B:F0:F2:7F:58:BF:DE:9B:A1:0F:07:92 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F08C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69B693A0D08B11EEB1833D56C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:52:01 +0000 ROA not before: Mon 06 Jul 2026 16:52:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136290 IP address blocks: 103.21.68.0/23 maxlen: 24 103.48.68.0/22 maxlen: 24 2407:b7c0::/32 maxlen: 32 2407:b7c0::/40 maxlen: 48 2407:b7c0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61580 (0xf08c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:52:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdd30-ba49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:ff:b4:e9:e8:10:2b:9d:3b:7e:2f:f7:93: a6:69:7b:4d:6a:18:e8:77:fd:b8:69:67:f5:09:e4: b9:9b:05:69:a3:83:a8:e8:d4:e1:18:ac:79:84:73: 6c:80:ae:c4:7f:1b:85:9a:59:d5:98:b4:e8:ff:e0: cf:be:77:28:08:a9:fc:1e:4b:54:20:e5:63:3c:da: 8f:56:95:81:e8:14:81:36:61:77:75:4c:ba:fb:07: db:6a:7d:92:2f:ad:cf:7d:c3:b8:ed:c4:a8:f4:44: 00:52:65:fe:f6:f0:17:f6:52:66:59:39:41:35:d8: 59:56:fb:6f:22:15:a0:8e:62:36:76:09:de:67:ab: f3:a2:ae:5c:25:bb:21:57:d3:74:38:42:32:39:e1: a9:34:c6:27:7d:e6:db:ab:a7:1c:00:8f:f2:a2:9e: cc:a6:18:73:9e:40:bb:39:04:a7:e6:07:37:8d:6a: 60:cc:aa:9d:bc:fa:84:51:99:31:bf:db:c2:e9:ab: ae:58:4b:7e:48:de:ea:dd:4f:cb:e9:22:ec:ec:58: 2e:c6:9a:2b:bd:d5:d1:1a:ec:76:be:20:4d:1d:9f: d1:24:7b:22:3e:bf:2e:e1:05:8b:d2:f5:85:07:06: 26:8c:c0:57:97:60:f6:41:95:0c:65:97:f7:b5:a4: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:69:D0:9D:05:7F:82:6B:F0:F2:7F:58:BF:DE:9B:A1:0F:07:92 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69B693A0D08B11EEB1833D56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.68.0/23 103.48.68.0/22 IPv6: 2407:b7c0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:0f:00:ef:a1:85:90:3e:d1:b3:63:cf:f4:14:e3:52:cb:eb: bc:8c:26:25:d4:83:7a:0d:23:c6:de:61:28:d8:ff:65:d7:0e: a6:a1:60:a1:ae:5a:80:67:f5:01:8a:12:ec:c1:76:a3:6a:b6: d8:52:fc:62:67:3c:52:a5:e2:21:94:3e:8f:94:b1:fd:ea:5a: 5f:b8:e7:07:90:9e:ae:f7:6a:e8:eb:19:a1:2c:0d:c5:5b:72: e0:8c:55:9a:19:0c:92:c6:70:50:5c:8b:d8:c9:3d:53:2a:f9: ca:10:76:82:54:14:f9:59:c1:cf:42:30:28:89:0c:82:4d:aa: b5:50:1d:7b:db:61:f6:8f:43:0f:96:42:4e:27:3b:8d:c8:91: f1:a9:a7:c1:ef:01:2c:fb:01:28:8d:f0:4a:18:44:57:cc:9b: 48:fa:5e:fb:8b:fb:84:26:79:8a:07:d3:d5:88:e6:04:25:e8: 37:43:19:b0:93:f4:07:80:b3:b7:64:e2:40:85:46:e4:30:13: 94:e3:cb:c9:d4:63:f4:fc:52:b0:c6:41:fc:c3:a7:71:9d:44: e4:40:f4:a9:73:cc:67:02:c3:4b:39:6a:d0:17:48:07:aa:7e: 7d:0d:f3:c0:5c:ea:ea:ab:5c:25:71:c9:2e:51:4b:59:c5:72: f7:81:3a:d1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAPCMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTIwMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkMzAtYmE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7E/7Tp6BArnTt+L/eTpml7TWoY6Hf9uGln9QnkuZsFaaODqOjU4RiseYRz bICuxH8bhZpZ1Zi06P/gz753KAip/B5LVCDlYzzaj1aVgegUgTZhd3VMuvsH22p9 ki+tz33DuO3EqPREAFJl/vbwF/ZSZlk5QTXYWVb7byIVoI5iNnYJ3mer86KuXCW7 IVfTdDhCMjnhqTTGJ33m26unHACP8qKezKYYc55AuzkEp+YHN41qYMyqnbz6hFGZ Mb/bwumrrlhLfkje6t1Py+ki7OxYLsaaK73V0Rrsdr4gTR2f0SR7Ij6/LuEFi9L1 hQcGJozAV5dg9kGVDGWX97WksnsCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBSzqWnQ nQV/gmvw8n9Yv96boQ8HkjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY5QjY5M0Ew RDA4QjExRUVCMTgzM0Q1NkM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAWcVRAMEAmcwRDANBAIAAjAHAwUAJAe3wDANBgkqhkiG9w0BAQsF AAOCAQEAXA8A76GFkD7Rs2PP9BTjUsvrvIwmJdSDeg0jxt5hKNj/ZdcOpqFgoa5a gGf1AYoS7MF2o2q22FL8Ymc8UqXiIZQ+j5Sx/epaX7jnB5Cervdq6OsZoSwNxVty 4IxVmhkMksZwUFyL2Mk9Uyr5yhB2glQU+VnBz0IwKIkMgk2qtVAde9th9o9DD5ZC Tic7jciR8amnwe8BLPsBKI3wShhEV8ybSPpe+4v7hCZ5igfT1YjmBCXoN0MZsJP0 B4Czt2TiQIVG5DATlOPLydRj9PxSsMZB/MOncZ1E5ED0qXPMZwLDSzlq0BdIB6p+ fQ3zwFzq6qtcJXHJLlFLWcVy94E60Q== -----END CERTIFICATE-----Generated at Tue Jul 21 13:55:57 2026 by rpki-client